Windows Registry Editor Version 5.00

; set applications policy to explicitly allowed
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer]
"RestrictRun"=dword:00000001

; permit applications only if explicitly listed below
[HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Policies\Explorer\RestrictRun]
"2"="regedit.exe"